Privacy Policy

Last updated: February 2026

1. Information We Collect

Account Information

When you create an account, we collect your email address, display name, and password (stored as a cryptographic hash). If you sign in via Google OAuth, we receive your name, email address, and profile picture from Google.

Conversation Data

We store your conversations with AI characters to provide continuity and memory across sessions. This includes message text, timestamps, and associated metadata. Conversation data is tied to your account and is not shared with other users unless you explicitly choose to share it.

Usage Data

We automatically collect information about how you interact with the Service, including pages visited, features used, session duration, device type, browser type, IP address, and referring URLs. This data helps us understand usage patterns and improve the Service.

Payment Information

Payment processing is handled by CCBill and NOWPayments (for cryptocurrency). We do not store your full credit card number or bank account details on our servers. We receive and store limited payment information from our processors, such as the last four digits of your card, card brand, billing address, and transaction identifiers, for record-keeping and customer support purposes.

Generated Media

When you use our image generation or voice synthesis features, we store the generated media files, associated prompts, and metadata (timestamps, generation parameters). This data is linked to your account and is subject to our content moderation processes. Generated media may be reviewed by automated systems and human moderators to ensure compliance with our content policies.

2. How We Use Information

Service Delivery

We use your information to operate, maintain, and provide the features and functionality of the Service. This includes generating AI responses, maintaining conversation history, processing payments, and managing your account.

Safety & Security

We use information to detect and prevent fraud, abuse, and violations of our Terms of Service. This includes content moderation to enforce our community guidelines and protect the safety of our users.

Analytics & Improvement

We use aggregated and anonymized usage data to analyze trends, improve our AI models and services, fix bugs, and develop new features. We do not use your private conversation content for training AI models without your explicit consent.

3. Data Retention

Conversation data is retained for as long as your account is active. You may delete individual conversations at any time through the Service interface. When you delete a conversation, the data is removed from our active systems within 30 days.

Account data is retained for as long as your account is active and for a reasonable period thereafter (up to 90 days) to allow for account recovery. After account deletion, personal data is purged from our systems, subject to any legal retention requirements.

4. Sharing of Information

We do not sell your personal information to third parties. We share information only in the following circumstances:

  • Payment Processing: We share necessary billing information with CCBill and NOWPayments (for cryptocurrency payments) to process your payments. These processors handle your payment data according to their respective privacy policies.
  • AI Providers: Conversation prompts are sent to third-party AI providers to generate responses. These providers process data according to their own privacy policies and data processing agreements.
  • Cloud Infrastructure: Your data is stored on cloud hosting services that provide industry-standard security and compliance certifications. These providers process data under strict data processing agreements.
  • Legal Requirements: We may disclose information if required to do so by law or in response to valid legal process, such as a subpoena or court order.
  • Safety: We may share information when we believe in good faith that disclosure is necessary to protect the safety of our users, the public, or Lustmate.

5. Security

We implement industry-standard security measures to protect your data, including:

  • Encryption of data in transit using TLS 1.2+
  • Encryption of sensitive data at rest using AES-256
  • Access controls and authentication requirements for internal systems
  • Regular security reviews and vulnerability assessments
  • Secure password hashing using bcrypt

While we take reasonable measures to protect your data, no method of transmission over the Internet or method of electronic storage is 100% secure.

6. Your Rights

GDPR (European Users)

If you are located in the European Economic Area, you have the following rights under the General Data Protection Regulation:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Deletion: Request that we delete your personal data, subject to legal retention requirements.
  • Right to Data Portability: Request an export of your data in a structured, machine-readable format.
  • Right to Rectification: Request correction of inaccurate personal data.
  • Right to Restrict Processing: Request that we limit how we use your data in certain circumstances.

CCPA (California Users)

If you are a California resident, you have the right to:

  • Know what personal information we collect, use, and disclose about you.
  • Request deletion of your personal information.
  • Opt out of the sale of personal information. Note: we do not sell your personal information.
  • Non-discrimination for exercising your privacy rights.

Data Export

You can request a full export of your data, including your account information, conversation history, characters created, and generated media. Data exports are provided in a structured JSON format. To request a data export, contact us at privacy@lustmate.ai or use the data export feature in your account settings.

To exercise any of these rights, please contact us at privacy@lustmate.ai.

7. Cookies

We use cookies and similar technologies to maintain your session, remember your preferences, and collect analytics data. Essential cookies are required for the Service to function and cannot be disabled. Analytics cookies (such as PostHog) help us understand usage patterns and may be disabled through your browser settings.

8. Children's Privacy

Lustmate is intended solely for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under the age of 18. If we become aware that a user is under 18, we will take steps to terminate their account and delete their data promptly. If you believe a minor is using the Service, please contact us immediately at privacy@lustmate.ai.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

10. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Lustmate

Email: privacy@lustmate.ai

Note: This Privacy Policy is a template and should be reviewed by a qualified attorney before launch. It is not legal advice.